This Privacy Policy explains how Cathcart Institute, LLC (“Cathcart Institute,” “we,” “our,” or “us”) collects, uses, protects, and shares personally identifiable information (“PII”) from visitors and subscribers of cathcart.com (“the Site”). “PII,” as described in U.S. privacy law and information security, is information that can be used on its own or in combination with other information to identify, contact, or locate a single person, or to identify an individual in context.
Please read this policy carefully. By using the Site or submitting information through it, you consent to the practices described below.
1. What Personal Information We Collect
When you contact us, subscribe to an email list, request information, register for an event, or submit any form on the Site, you may be asked to provide some or all of the following:
- Name
- Email address
- Phone number
- Company or organization
- Postal address (for event, invoicing, or shipping purposes)
- Event details (for speaking inquiries: event date, audience size, location, budget range)
- Any additional message content you choose to share
We do not knowingly collect information from children under 13.
2. When We Collect Information
We collect information when you:
- Submit a contact form on the Site
- Subscribe to our email newsletter or mailing list
- Register for a program (Strategic Mentorship, Going Pro, CPE, Professional Experts Summit, Cathcart Institute Asia)
- Request materials, a speaker packet, or bureau information
- Interact with the Site in ways that generate automatic technical data (see Cookies and Analytics below)
3. How We Use Your Information
We may use the information we collect to:
- Respond to your inquiry or request
- Personalize your experience on the Site
- Deliver programs, services, materials, and communications you have requested
- Follow up after a live conversation, email exchange, event, or signup
- Send periodic newsletters, program announcements, and event invitations (you can unsubscribe at any time)
- Improve the Site and our programs
- Fulfill contractual obligations arising from services you have purchased
- Comply with our legal and regulatory obligations
4. How We Share Your Information With Third Parties
We do not sell, trade, or rent your PII to outside parties. We share information only with trusted service providers that help us operate the Site and deliver our programs, including:
- GoHighLevel (CRM). When you submit a contact form on the Site, your name, email address, phone (if provided), subject, and message are transmitted to our GoHighLevel CRM so we can respond and manage the conversation. GoHighLevel acts as a data processor under our instructions.
- Mailgun (email delivery and notifications). Contact form submissions trigger an email notification to our team via Mailgun. Mailgun processes routing metadata and message content solely for delivery. If you subscribe to our newsletter, Mailgun may also be used to send those messages.
- Netlify (hosting and serverless functions). The Site is hosted on Netlify. Netlify Functions process form submissions and other server-side logic. Netlify receives the request metadata (IP address, user agent, referrer) that is standard for any web host.
- Neon (database). A record of your submission is stored in our managed PostgreSQL database (Neon) so we have an audit trail and can search past conversations.
- Google Analytics 4 and Microsoft Clarity (analytics and session recording). Described in the Cookies and Analytics section below.
Beyond these processors, we may disclose information when:
- We are legally required to do so (subpoena, court order, regulatory request)
- It is necessary to enforce our site policies, terms, or contractual agreements
- It is necessary to protect the rights, property, or safety of Cathcart Institute, our users, or the public
5. Cookies and Analytics
The Site uses cookies and similar technologies. You can configure your browser to warn you each time a cookie is being set, or to block cookies entirely. Disabling cookies may cause parts of the Site to stop functioning properly.
We use the following cookie and analytics technologies:
- Google Analytics 4 (GA4). We use GA4 to understand how visitors interact with the Site (pages viewed, time on page, traffic sources, conversions). GA4 uses first-party cookies and may process a truncated IP address. You can opt out by installing the Google Analytics Opt-Out Browser Add-on.
- Microsoft Clarity.We use Microsoft Clarity to capture anonymized session recordings and heatmaps that help us identify usability issues. Clarity may record mouse movements, clicks, scrolls, and keystrokes (with sensitive inputs automatically masked). Microsoft may aggregate this behavioral data with other data Microsoft holds. You can read Microsoft’s privacy statement at privacy.microsoft.com.
- Netlify Functions. Our serverless functions process form submissions and certain API routes. Standard request metadata (IP, user agent, headers) is visible to the function runtime and may be logged for a short retention window for debugging and abuse prevention.
- Strictly necessary cookies. A small number of cookies may be set to maintain session state, remember your preferences, or provide basic site functionality. These cannot be disabled without breaking the Site.
We do not use Facebook Pixel, and we do not participate in third-party advertising retargeting networks at this time.
6. How We Protect Your Information
We take reasonable steps to protect your information:
- The Site is served exclusively over HTTPS (TLS encryption in transit)
- Access to our CRM, database, and analytics dashboards is restricted to authorized personnel and protected by unique credentials
- Form submissions are transmitted to our processors over encrypted connections
- We review and update our security posture as our stack evolves
No method of transmission over the internet or electronic storage is 100 percent secure. We cannot guarantee absolute security, but we will notify affected users via email within seven business days if a data breach involving your PII is confirmed.
7. Your Data Protection Rights
Depending on your jurisdiction, you have some or all of the following rights:
- Right to access. You may request a copy of the personal data we hold about you.
- Right to rectification. You may request that we correct or complete inaccurate or incomplete data.
- Right to erasure. You may request that we delete your personal data, subject to certain legal exceptions.
- Right to restrict processing. You may request that we limit how we process your personal data, under certain conditions.
- Right to object to processing. You may object to our processing of your personal data, under certain conditions.
- Right to data portability. You may request that we transfer the data we hold about you to another organization, or directly to you, in a structured, commonly-used format.
To exercise any of these rights, email us at info@cathcart.com. We aim to respond within one month of receiving a verified request.
We also honor the Individual Redress Principle, which provides that individuals have legally enforceable rights against data collectors and processors that fail to adhere to applicable law.
8. Email Communications
We collect your email address in order to:
- Respond to your inquiries and requests
- Send information about the products, services, programs, and events you have requested
- Market to our mailing list, including follow-ups after an initial transaction or conversation
If at any time you would like to stop receiving email from us, click the “unsubscribe” link at the bottom of any message and we will promptly remove you from that list. If you would like to be removed from all correspondence, reply to any of our emails with the word “remove” or contact us at info@cathcart.com.
9. Third-Party Links
The Site may link to external sites, including book retailers (Amazon), podcast platforms, YouTube videos, LinkedIn, and other resources. We are not responsible for the privacy practices of those external sites. We encourage you to read the privacy policy of any website you visit.
10. Do-Not-Track Signals
Some browsers offer a “Do Not Track” (DNT) signal. Because there is no universal standard for how DNT should be handled, the Site does not currently respond differently to DNT signals. You can still opt out of analytics as described in Section 5.
11. Children’s Privacy
The Site is directed to a professional adult audience. We do not knowingly collect information from children under 13. If we learn that we have collected such information, we will delete it promptly.
12. Changes to This Policy
We may update this policy from time to time. When we do, we will update the “Effective Date” at the top of this page. Material changes will be announced on the Site (and, where appropriate, by email) at least 14 days before they take effect.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your personal data, contact us at:
Cathcart Institute, LLC
Email: info@cathcart.com